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Listing of the Claims : 

This listing of the claims will replace all prior versions, and listings, of 
claims in the application: 
Listing of Claims : 

1 . (Previously Presented) A method for determining the operational 
characteristics of a program, comprising a verification procedure comprising the 
following steps: 

- a first step comprising: 

■ expressing the operational characteristics of the program as functions 
dealing with occurrences or sequences of occurrences of events 
occurring during executions of the program, said events being able to 
deal with particular operations, particular values of data, at particular 
program points and in particular states of the program; 

■ determining a level of precision with which these characteristics must 
be determined; 

■ determining a set of particular contexts of execution in which the 
program will always be executed; and 

■ determining operational specificities of a set of platforms on which the 
program will be executed; 

- a second step of estimation, by program analysis, and in consideration of 
said level of precision, of said set of particular contexts of execution and of said 
operational specificities of platforms, of information relating to a structure of the 
program, execution paths of the program and to values of data, at various points of 
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the execution paths and under different execution conditions, of states of the 
program and data handled by the program; and 

- a third step for determining said operational characteristics, by means of the 
information extracted by said program analysis, by computation of said functions on 
the occurrences or particular sequences of occurrences of particular operations, 
dealing with particular values, at particular points of the program, in particular states 
of the program, for the set of execution paths determined by analysis. 

2. (Previously Presented) The method according to claim 1 , wherein, 
in the case when the program is interactive and may depend on an undetermined 
number of dynamic values resulting from this interaction, the contexts of execution 
are given by a description abstracted from series of data representing said dynamic 
values. 

3. (Previously Presented) The method according to claim 1 , wherein, 
in the case where the program is inserted into a framework of execution, said second 
step of estimation comprises static analysis which also take into account the 
semantics of this framework of execution, including implicit interaction loops of the 
program. 

4. (Previously Presented) The method according to claim 1 , wherein 
certain of said particular operations, which form events, accompanied by constraints 
on the values handled, the execution points, and the states of the program, are 
defined as one of the following actions: call to a given routine, access to a given 
variable, reading or writing on a given port, computation of a given arithmetic 
expression, completion of execution of the program or of a routine on a normal return 
or ending an exception. 
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5. (Previously Presented) The method according to claim 3, wherein 
certain of said static analysis consist of abstract interpretations of the program, on 
abstract domains which may notably represent sets of values and symbolic 
expressions. 

6. (Previously Presented) The method as claimed in claim 1 , wherein 
said extracted information are represented by means of one or more of the following 
structures: state graph of the program, inheritance graph, graph of the routine calls 
of the program, control flow chart of each routine of the program, structure of loops 
and catch-up of exceptions, structure of basic blocks, abstraction of the state of the 
program at an execution point. 

7. (Previously Presented) The method according to claim 1 , wherein 
said extraction of information does not apply to unnecessary information for 
determining the operational characteristics, both from the viewpoint of the amount of 
information extracted and from the precision of these pieces of information. 

8. (Previously Presented) The method according to claim 1 , wherein 
only major pieces of information among said extracted information are computed and 
saved and in that the other pieces of information are only computed when necessary 
for determining said operational characteristics. 

9. (Previously Presented) The method according to claim 8, wherein 
the major pieces of information are information extracted at breakdown nodes of the 
code of routines in a graph of basic blocks and in that the other pieces of 
information, in the body of the basic blocks, are recomputed by local analysis from 
information saved at the start and end of the corresponding block. 
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10. (Previously Presented) The method according to claim 1 , wherein 
said operational characteristics represent validity criteria and in that said 
determination establishes that the program is valid, because it observes each of said 
criteria, or Invalid, because at least one of said criteria cannot be observed. 

1 1 . (Previously Presented) The method according to claim 1 0, 
wherein said validity criteria express security or interoperability rules. 

12. (Previously Presented) The method according to claim 1 , wherein 
said operational characteristics characterise resources which are consumed and 
functionalities which are exploited by the program during its execution and in that 
said determination provides an execution profile of the program. 

13. (Previously Presented) The method according to claim 3, wherein 
a computation of certain of said functions associated with the operational 
characteristics is performed during said static program analysis, as soon as certain 
of said pieces of information are extracted. 

14. (Previously Presented) The method according to claim 10 for 
automatic filtering of a set of programs relative to a given set of validity criteria, 
wherein the extraction of information by static program analysis is only completed 
once per program and reused whenever necessary for determining whether the 
program observes said set of validity criteria. 

15. (Previously Presented) A method for distribution of applications 
ensuring that the applications observe validity criteria associated with the execution 
platforms of these applications, comprising filtering step such that, for any client 
desiring to accede to the applications for a certain execution platform, the 
applications are filtered by a verification procedure in accordance with the method 
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according to any one of claims 1 to 12, only the applications which observe the 
validity criteria for said platform being presented to the client. 

16. (Previously Presented) A system for multi-application execution 
of the method for determining the operational characteristics of a program of claim 1 , 
for_ensurlng that the applications observe given validity criteria, the system 
comprising: 

- an application analysis server, a server for validation of applications and a 
multi-application platform, and 

- means for ensuring, prior to loading or execution of an application on the 
platform: 

- observance by this application of said validity criteria, an 
extraction of information being carried out on the application analysis 
server and an evaluation of said validity criteria being carried out on the 
server for validation of applications, and 

- in the case when one of the validity criteria cannot be 
observed, a failure of loading or execution of the application, a change 
of the state of the system and an emission of a sound or visual signal 
to alert of failure of loading or execution. 

17. (Previously Presented) The system according to claim 19, 
wherein the server for validation of applications is executed on the multi-application 
platform, the application analysis server executing outside the platform. 

18. (Previously Presented) The system according to claim 19, 
wherein the application analysis server and the server for validation of applications 
are executed on the multi-application platform. 
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19. (Previously Presented) A system for multi-application execution of 
the method for determining the operational characteristics of a program of claim 1 , 
for ensuring that the applications observe given validity criteria, the system 
comprising: 

- an application analysis server, a server for validation of applications 
and a multi-application platform, and 

- means for ensuring, prior to loading or execution of an application on 

the platform: 

- observance by this application of said validity criteria, an extraction of 
information being carried out on the application analysis server and an 
evaluation of said validity criteria being carried out on the server for 
validation of applications, and 

- in the case when one of the validity criteria cannot be observed, a 
failure of loading or execution of the application, a change of the state 
of the system and an emission of a sound or visual signal to alert of 
failure of loading or execution, 

the means for insuring observance by said application of said validity 
criteria executing a procedure comprising the following steps: 

- a first step comprising: 

■ expressing the validity criteria of the program as functions 
dealing with occurrences or sequences of occurrences of 
events which occurring during executions of the program, 
said events being able to deal with particular operations, 
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particular values of data, at particular program points and in 
particular states of the program; 

■ determining a level of precision with which these validity 
criteria must be determined; 

■ determining a set of particular contexts of execution in 
which the program will always be executed; 

■ determining operational specificities of a set of platforms on 
which the program will be executed; 

- a second step of estimation, by program analysis, and in 
consideration of said level of precision, of said set of particular contexts 
of execution and of said operational specificities of platforms, of 
information relating to a structure of the program, execution paths of 
the program and to the values of data, at various points of the 
execution paths and under different execution conditions, of the states 
of the program and data handled by the program; 

- a third step for determining said validity criteria, by means of the 
information extracted by said program analysis, by computation of said 
functions on the occurrences or particular sequences of occurrences of 
particular operations, dealing with particular values, at particular points 
of the program, in particular states of the program, for the set of 
execution paths determined by analysis. 



